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REMARKS 

la the action dated May 12, 2004, die Examiner has rejected claims 1 and 7 under 35 
U.S.C § 112, first paragraph, as failing to comply with the enablement requirement. 
Specifically, claims 1 and 7 recite a 'Variable security profile specifying a variable number of 
unsuccessful power-on attempts permitted based upon at least one other factor chosen from time 
of day, day of week and security level of authorization of the user." Based upon a careful 
consideration of the Examiner's comments, Applicant has amended the punctuation of claims 1 
and 7 to recite that the variable security profile specifies a variable number of unsuccessful 
power-on password attempts permitted based upon at least one factor chosen from time of day 
and day of week and that the variable security profile also specifies a security level of 
authorization of the user. Support for this is found in the present specification at page 16, lines 
5-13 wherein field 74 of security profile 70 is specified as indicating the number of unsuccessful 
attempts at entering a password which are permitted before system is shut down, and notes "This 
field could be set by an operation system API (for example, to take into account a greater 
security exposure during certain time periods, like late evening or on certain days, like 
weekends)/* 

Thereafter, page 16, line 14 et seq>, field 76 of security profile 70 is described as 
specifying the level of access for a particular user. Thus, it is beyond cavil that security profile 
70 includes field 74 and field 76 which specify the number of unsuccessful attempts at entering a 
user password which are permitted before system shutdown, based upon the time of day and day 
of week and that further the variable security profile 70 also specifies the security level 
authorization of the user. Based upon these simple punctuation changes, Applicant urges that the 
current specification clearly enables the invention now set forth within these claims and 
withdrawal of the Examiner's rejection of claims 1 and 7 under 35 U.S.C. § 112, first paragraph 
is respectfully requested. 

Next, the Examiner has rejected claims 1-9 under 35 U.S.C § 102(b) as being anticipated 
by Frisch "Essential System Administration 2 nd Edition" (hereinafter referred to as Friscti). That 
rejection is respectfully traversed. 
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Frisch indeed discloses a well-known technique for limitibag access to computers by 
providing a log-in profile which permits the system to allow or deny use of the computer based 
upon several user log-in characteristics such as the number of unsuccessful log-in attempts and 
the number of weeks a password to a particular account remains unchanged. However, 
Applicant has carefully examined Frisch and fails to find event the slightest suggestion within 
Frisch of a variable security profile which is generated automatically when the system is turned 
on and which specifies a variable number of permitted unsuccessful power-on password attempts 
based upon either time of day or day of week, as expressly set forth within the claims of the 
present application. Consequently, Applicant urges that Frisch cannot be said to anticipate, 
show or suggest such an invention and the Examiner's rejection is not believed to be well- 
founded. 

Further, Applicant urges the Examiner to consider that the mere monitoring of the 
number of unsuccessful log-in attempts does not, in any way, show, suggest or anticipate the 
establishment of a variable number of permitted unsuccessful power-on password attempts based 
upon factors such as the time of day or day of week as set forth within the claims of the present 
application and withdrawal of the Examiner's rejection of claims 1-9 is respectfully requested for 
that reason. 

The Examiner has also rejected claim 10 under 35 U-S-C, S 103(a) as being unpatentable 
over Frisch in view of Schmidt U.S. Patent No. 5,9 1 2,62 L The Examiner cites Schmidt for its 
teaching of a computer system which is responsive to removal of its physical encasing; however, 
nothing within Schmidt shows or suggest the specification of a variable number of unsuccessful 
power-on password attempts which are permitted based upon the time of day or day of week as 
set forth within claim 7, from which claim 10 indirectly depends. Consequently, Applicant urges 
that this rejection is also not well-founded and its withdrawal is respectfully requested. 
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No extension of time is believed to be required. However, in the event that an extension 
of time is required, please charge that extension fee and any other required fees to IBM 
Corporation Deposit Account Number 50-0563. 



Respectfully submitted, 
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